1 /*
2 * Copyright (c) 2015 Nicira, Inc.
3 *
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of version 2 of the GNU General Public
6 * License as published by the Free Software Foundation.
7 *
8 * This program is distributed in the hope that it will be useful, but
9 * WITHOUT ANY WARRANTY; without even the implied warranty of
10 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
11 * General Public License for more details.
12 */
13
14 #ifndef OVS_CONNTRACK_H
15 #define OVS_CONNTRACK_H 1
16
17 #include "flow.h"
18
19 struct ovs_conntrack_info;
20 struct ovs_ct_limit_info;
21 enum ovs_key_attr;
22
23 #if IS_ENABLED(CONFIG_NF_CONNTRACK)
24 int ovs_ct_init(struct net *);
25 void ovs_ct_exit(struct net *);
26 bool ovs_ct_verify(struct net *, enum ovs_key_attr attr);
27 int ovs_ct_copy_action(struct net *, const struct nlattr *,
28 const struct sw_flow_key *, struct sw_flow_actions **,
29 bool log);
30 int ovs_ct_action_to_attr(const struct ovs_conntrack_info *, struct sk_buff *);
31
32 int ovs_ct_execute(struct net *, struct sk_buff *, struct sw_flow_key *,
33 const struct ovs_conntrack_info *);
34 int ovs_ct_clear(struct sk_buff *skb, struct sw_flow_key *key);
35
36 void ovs_ct_fill_key(const struct sk_buff *skb, struct sw_flow_key *key);
37 int ovs_ct_put_key(const struct sw_flow_key *swkey,
38 const struct sw_flow_key *output, struct sk_buff *skb);
39 void ovs_ct_free_action(const struct nlattr *a);
40
41 #define CT_SUPPORTED_MASK (OVS_CS_F_NEW | OVS_CS_F_ESTABLISHED | \
42 OVS_CS_F_RELATED | OVS_CS_F_REPLY_DIR | \
43 OVS_CS_F_INVALID | OVS_CS_F_TRACKED | \
44 OVS_CS_F_SRC_NAT | OVS_CS_F_DST_NAT)
45 #else
46 #include <linux/errno.h>
47
ovs_ct_init(struct net * net)48 static inline int ovs_ct_init(struct net *net) { return 0; }
49
ovs_ct_exit(struct net * net)50 static inline void ovs_ct_exit(struct net *net) { }
51
ovs_ct_verify(struct net * net,int attr)52 static inline bool ovs_ct_verify(struct net *net, int attr)
53 {
54 return false;
55 }
56
ovs_ct_copy_action(struct net * net,const struct nlattr * nla,const struct sw_flow_key * key,struct sw_flow_actions ** acts,bool log)57 static inline int ovs_ct_copy_action(struct net *net, const struct nlattr *nla,
58 const struct sw_flow_key *key,
59 struct sw_flow_actions **acts, bool log)
60 {
61 return -ENOTSUPP;
62 }
63
ovs_ct_action_to_attr(const struct ovs_conntrack_info * info,struct sk_buff * skb)64 static inline int ovs_ct_action_to_attr(const struct ovs_conntrack_info *info,
65 struct sk_buff *skb)
66 {
67 return -ENOTSUPP;
68 }
69
ovs_ct_execute(struct net * net,struct sk_buff * skb,struct sw_flow_key * key,const struct ovs_conntrack_info * info)70 static inline int ovs_ct_execute(struct net *net, struct sk_buff *skb,
71 struct sw_flow_key *key,
72 const struct ovs_conntrack_info *info)
73 {
74 kfree_skb(skb);
75 return -ENOTSUPP;
76 }
77
ovs_ct_clear(struct sk_buff * skb,struct sw_flow_key * key)78 static inline int ovs_ct_clear(struct sk_buff *skb,
79 struct sw_flow_key *key)
80 {
81 return -ENOTSUPP;
82 }
83
ovs_ct_fill_key(const struct sk_buff * skb,struct sw_flow_key * key)84 static inline void ovs_ct_fill_key(const struct sk_buff *skb,
85 struct sw_flow_key *key)
86 {
87 key->ct_state = 0;
88 key->ct_zone = 0;
89 key->ct.mark = 0;
90 memset(&key->ct.labels, 0, sizeof(key->ct.labels));
91 /* Clear 'ct_orig_proto' to mark the non-existence of original
92 * direction key fields.
93 */
94 key->ct_orig_proto = 0;
95 }
96
ovs_ct_put_key(const struct sw_flow_key * swkey,const struct sw_flow_key * output,struct sk_buff * skb)97 static inline int ovs_ct_put_key(const struct sw_flow_key *swkey,
98 const struct sw_flow_key *output,
99 struct sk_buff *skb)
100 {
101 return 0;
102 }
103
ovs_ct_free_action(const struct nlattr * a)104 static inline void ovs_ct_free_action(const struct nlattr *a) { }
105
106 #define CT_SUPPORTED_MASK 0
107 #endif /* CONFIG_NF_CONNTRACK */
108
109 #if IS_ENABLED(CONFIG_NETFILTER_CONNCOUNT)
110 extern struct genl_family dp_ct_limit_genl_family;
111 #endif
112 #endif /* ovs_conntrack.h */
113
